Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
File: h0tZG12PB26vRy4-pF07XI4TUKE.mft (raw, json)
Hash identifier: +1dMVnbMY7UmQDnbbfE8Z1DhjE+/fZtsfk71Dzf17ok=
Subject key identifier: B8:2B:92:02:1F:FE:6B:BE:58:55:ED:97:13:17:09:3A:ED:65:46:77
Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Certificate serial: 0193568A388BBD0BDE08148BFCF0F9377299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 01:01:59 +0000
Manifest this update: Sat 23 Nov 2024 01:01:59 +0000
Manifest next update: Sun 24 Nov 2024 01:01:59 +0000
Files and hashes: 1: 67CdTiNYozCDfzsAx5MIvi7c4LI.roa (hash: H9MMMNuDkAt3TJd4bU13MEXWbtJgGTBkV2CPkBNZcLk=)
2: W_x5VW5d8eSoaAiYHkMlBY9fvY8.roa (hash: k7hveGUEp65MZum9xaoNV+WMJ92dz/rsX2O4hNNeRCw=)
3: h0tZG12PB26vRy4-pF07XI4TUKE.crl (hash: BmypQATmse6vxfajS9cJ/DAhJA6hsHkJKl0AudelJrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:38:8b:bd:0b:de:08:14:8b:fc:f0:f9:37:72:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Validity
Not Before: Nov 23 01:01:59 2024 GMT
Not After : Nov 24 01:01:59 2024 GMT
Subject: CN=b82b92021ffe6bbe5855ed971317093aed654677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:69:cf:3f:c1:2f:c9:10:7b:3f:c5:37:19:
97:8e:69:b2:49:24:8f:87:95:c5:cb:ef:12:14:44:
a4:80:04:5f:3c:35:87:51:c1:cd:95:5a:bd:5a:f3:
af:21:92:b9:3c:a8:6a:05:cc:09:1a:63:ca:5a:2a:
cc:a5:2e:96:f3:c8:64:e9:29:2c:1b:7e:50:f4:36:
b3:b3:26:10:e5:ce:99:e6:64:cc:85:bd:43:be:4a:
9a:b8:fc:e8:ea:e0:f0:40:4d:21:05:fb:79:ff:90:
33:0a:45:1a:8f:8b:b6:63:ab:1c:61:05:3c:5d:a4:
bf:6e:5b:07:70:3c:72:6f:38:c8:30:25:cd:19:b1:
8e:09:43:e7:2f:5a:95:0b:56:48:3b:1f:4f:d5:29:
6e:eb:e7:11:74:92:e0:ad:03:8c:aa:f7:0d:08:96:
4b:7d:e0:07:1c:e8:64:8c:87:c3:6e:bf:97:e1:08:
0e:96:90:a5:da:fc:e1:96:eb:4c:0f:d8:cc:3b:38:
74:41:ad:52:4b:4a:d1:b2:bd:77:ed:e4:7f:88:7a:
a4:86:81:9e:89:e4:94:ae:5e:88:fd:cc:1e:b2:d3:
06:09:e0:6b:8a:f6:87:c7:1b:82:14:72:ea:67:05:
03:08:6b:f2:2f:a5:a6:7b:a6:40:70:c2:cf:cc:b3:
48:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2B:92:02:1F:FE:6B:BE:58:55:ED:97:13:17:09:3A:ED:65:46:77
X509v3 Authority Key Identifier:
keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:80:18:d6:99:4e:ff:33:c4:39:21:32:8b:e1:88:4d:cf:01:
dc:e7:67:88:e0:03:8e:29:79:c5:04:92:d2:6c:38:8b:7e:7d:
7b:d6:dc:0d:86:6c:3b:64:84:11:16:ba:bc:5c:8f:ed:7e:6a:
c5:35:2f:ec:31:e0:12:60:f2:76:59:0d:ad:3b:f7:d5:7b:f6:
5d:ce:90:78:9d:4b:04:2c:1f:79:de:5c:c4:fd:92:a3:d8:4e:
bb:ff:ee:3f:3c:34:c4:9d:55:44:59:bc:24:43:e5:b8:62:67:
01:42:60:8a:25:8c:8d:08:65:82:24:b5:5c:59:6f:ed:dd:53:
5d:76:e8:b3:27:3d:50:94:20:2a:1c:3e:b0:dd:38:9e:7e:fe:
e8:17:9c:7a:bb:ac:b9:f1:d5:8b:46:cc:4e:29:f1:ab:e5:81:
52:e7:cd:e5:ef:f5:9e:bb:e0:05:98:fd:79:c7:f9:05:82:e0:
0d:6b:fe:fe:82:57:e4:3b:a8:d5:36:d0:7c:1c:cb:b7:0e:01:
35:0b:69:ef:47:f8:48:db:0a:e7:ac:12:1e:f0:a3:16:7c:d2:
69:c4:36:a1:5b:27:de:a4:70:f9:80:d3:65:5b:a2:28:b2:41:
47:1c:b6:5b:41:96:e3:5b:f1:d1:e5:a7:dc:71:fd:df:da:32:
58:39:15:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWijiLvQveCBSL/PD5N3KZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGI1OTFiNWQ4ZjA3NmVhZjQ3MmUzZWE0NWQzYjVjOGUx
MzUwYTEwHhcNMjQxMTIzMDEwMTU5WhcNMjQxMTI0MDEwMTU5WjAzMTEwLwYDVQQD
EyhiODJiOTIwMjFmZmU2YmJlNTg1NWVkOTcxMzE3MDkzYWVkNjU0Njc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzRpzz/BL8kQez/FNxmXjmmySSSP
h5XFy+8SFESkgARfPDWHUcHNlVq9WvOvIZK5PKhqBcwJGmPKWirMpS6W88hk6Sks
G35Q9DazsyYQ5c6Z5mTMhb1DvkqauPzo6uDwQE0hBft5/5AzCkUaj4u2Y6scYQU8
XaS/blsHcDxybzjIMCXNGbGOCUPnL1qVC1ZIOx9P1Slu6+cRdJLgrQOMqvcNCJZL
feAHHOhkjIfDbr+X4QgOlpCl2vzhlutMD9jMOzh0Qa1SS0rRsr137eR/iHqkhoGe
ieSUrl6I/cwestMGCeBrivaHxxuCFHLqZwUDCGvyL6Wme6ZAcMLPzLNIuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgrkgIf/mu+WFXtlxMXCTrtZUZ3MB8GA1UdIwQY
MBaAFIdLWRtdjwdur0cuPqRdO1yOE1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jYWQ1MjEtZGFiZS00OWE4LWJjZTQt
MGM2YTY3ODIwYTU4LzEvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jYWQ1MjEtZGFiZS00OWE4LWJjZTQtMGM2YTY3ODIwYTU4
LzEvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABoAY1plO
/zPEOSEyi+GITc8B3OdniOADjil5xQSS0mw4i359e9bcDYZsO2SEERa6vFyP7X5q
xTUv7DHgEmDydlkNrTv31Xv2Xc6QeJ1LBCwfed5cxP2So9hOu//uPzw0xJ1VRFm8
JEPluGJnAUJgiiWMjQhlgiS1XFlv7d1TXXbosyc9UJQgKhw+sN04nn7+6Becerus
ufHVi0bMTinxq+WBUufN5e/1nrvgBZj9ecf5BYLgDWv+/oJX5Duo1TbQfBzLtw4B
NQtp70f4SNsK56wSHvCjFnzSacQ2oVsn3qRw+YDTZVuiKLJBRxy2W0GW41vx0eWn
3HH939oyWDkVWA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:09 2024 by rpki-client on console-ams.rpki-client.org